$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa File: F11BA4EA75B811EDA34F9687C4F9AE02.roa (raw, json) Hash identifier: FDlBQttiAjfW5cf3WMiGkJNbaMYuBenMKHgdFn6C9uo= Subject key identifier: 68:FF:6E:18:57:0E:12:90:E3:33:7D:32:7D:01:0A:69:5F:60:25:56 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: CC Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa Signing time: Mon 11 Dec 2023 04:54:27 +0000 ROA not before: Mon 11 Dec 2023 04:54:27 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 133876 IP address blocks: 103.44.148.0/24 maxlen: 24 203.16.200.0/24 maxlen: 24 203.16.201.0/24 maxlen: 24 203.16.202.0/24 maxlen: 24 203.16.203.0/24 maxlen: 24 2400:bf20::/36 maxlen: 36 2400:bf20:1000::/36 maxlen: 36 2400:bf20:2000::/36 maxlen: 36 2400:bf20:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 05:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Dec 11 04:54:27 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65769603-1729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:f5:ba:9c:ba:8d:4e:80:0d:be:f4:b5:29: 0e:0b:1e:e9:98:e4:91:7f:af:c5:e0:af:ec:b1:e7: 6b:c9:d5:6d:13:3c:f9:e2:de:17:39:e1:e7:eb:c0: c3:14:e8:13:aa:eb:6d:e7:ab:db:19:e6:4a:9f:ac: 3b:f4:83:58:ae:41:05:70:95:ba:7f:4b:5d:85:df: 6b:e2:e7:e6:71:ab:84:08:ce:55:4c:de:a7:6b:ea: ca:0c:6f:dc:df:dd:b8:da:a2:73:6e:8a:ba:0a:f5: 6c:e5:2c:d5:c0:70:2e:a1:43:0a:cd:60:eb:76:cf: 5d:4a:8a:61:d4:1b:ac:88:59:6e:4b:ba:43:77:8b: 12:8d:95:1d:fb:fa:1f:68:17:1e:67:a8:c3:52:45: 5b:c1:08:54:ec:da:e8:cf:ba:d7:66:4f:1a:24:8f: 74:b1:5c:d4:b1:28:1b:65:96:2d:a8:5e:3a:6f:af: 87:11:e1:63:fb:73:29:bf:d9:17:5d:df:bf:4d:31: 25:f0:3e:ee:83:34:7b:5b:bd:43:1e:05:2e:f3:77: 97:fa:77:2d:a9:df:d3:b9:25:13:29:75:1a:c9:6b: 90:c5:ac:7c:41:c6:06:db:30:d0:7d:56:a1:66:64: d9:72:79:15:8a:74:fd:fc:f6:b5:4a:9a:40:18:1e: 7e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:6E:18:57:0E:12:90:E3:33:7D:32:7D:01:0A:69:5F:60:25:56 X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.44.148.0/24 203.16.200.0/22 IPv6: 2400:bf20::/34 Signature Algorithm: sha256WithRSAEncryption 6e:94:13:8d:0c:05:18:31:1b:d9:8b:9c:5b:74:8f:62:33:83: 42:5d:5b:dd:1a:e2:49:bb:f0:dc:22:7a:d0:02:14:55:9b:b5: 95:a2:f2:96:e4:07:df:e4:03:4e:ec:f8:5e:54:a5:f7:c8:fa: 66:1c:b7:70:99:0f:60:f6:7b:ab:13:d2:5d:15:bb:6c:0a:0c: 8c:80:ba:99:f9:f5:18:27:26:0a:b6:74:2d:6a:9a:e8:4f:e9: fa:b7:e2:97:e6:af:8f:61:d8:b2:91:94:64:13:78:e9:c0:db: 01:77:2e:fa:f2:04:c1:a9:7f:63:b7:cc:ba:8d:50:30:fd:af: 43:4b:0f:c2:f6:07:0a:c9:f3:f1:61:6f:70:f4:85:a3:c8:0a: b7:a9:9f:9c:8e:49:b2:fe:2f:7d:7b:b6:26:3a:36:26:96:13: be:65:b1:f9:c9:29:45:b1:f5:8e:ae:85:b0:3e:fa:50:bb:2c: 98:ad:42:8e:34:68:73:1f:85:88:34:58:38:21:94:16:f5:7e: 38:f0:00:10:16:3a:20:54:a2:cf:4b:29:a2:fc:c0:56:f2:a1: ed:03:22:59:77:4c:6e:7f:c7:aa:96:fd:b8:f4:91:31:dd:2f: 14:11:62:eb:f8:b9:ff:15:2f:02:44:5d:0c:93:5c:b5:1f:15: db:e8:9c:a7 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjMxMjExMDQ1NDI3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTc2OTYwMy0xNzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkv1upy6jU6ADb70tSkOCx7pmOSRf6/F4K/ssedrydVtEzz54t4XOeHn68DD FOgTqutt56vbGeZKn6w79INYrkEFcJW6f0tdhd9r4ufmcauECM5VTN6na+rKDG/c 39242qJzboq6CvVs5SzVwHAuoUMKzWDrds9dSoph1BusiFluS7pDd4sSjZUd+/of aBceZ6jDUkVbwQhU7Nroz7rXZk8aJI90sVzUsSgbZZYtqF46b6+HEeFj+3Mpv9kX Xd+/TTEl8D7ugzR7W71DHgUu83eX+nctqd/TuSUTKXUayWuQxax8QcYG2zDQfVah ZmTZcnkVinT9/Pa1SppAGB5+zQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGj/bhhX DhKQ4zN9Mn0BCmlfYCVWMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDQjAvMzc3MDEyNEU2QkM1MTFFRDg2NkE3RDVFQzRGOUFFMDIvRjExQkE0RUE3 NUI4MTFFREEzNEY5Njg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBABnLJQDBALLEMgwDgQCAAIwCAMGBiQAvyAAMA0GCSqGSIb3 DQEBCwUAA4IBAQBulBONDAUYMRvZi5xbdI9iM4NCXVvdGuJJu/DcInrQAhRVm7WV ovKW5Aff5ANO7PheVKX3yPpmHLdwmQ9g9nurE9JdFbtsCgyMgLqZ+fUYJyYKtnQt aproT+n6t+KX5q+PYdiykZRkE3jpwNsBdy768gTBqX9jt8y6jVAw/a9DSw/C9gcK yfPxYW9w9IWjyAq3qZ+cjkmy/i99e7YmOjYmlhO+ZbH5ySlFsfWOroWwPvpQuyyY rUKONGhzH4WINFg4IZQW9X448AAQFjogVKLPSymi/MBW8qHtAyJZd0xuf8eqlv24 9JEx3S8UEWLr+Ln/FS8CRF0Mk1y1HxXb6Jyn -----END CERTIFICATE-----Generated at Fri Jun 7 06:52:46 2024 by rpki-client on console-ams.rpki-client.org